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Abstract. The sum-product phenomenon predicts that a finite 
set A in a ring R should have either a large sumset A + A or 
large product set A- A unless it is in some sense "close" to a finite 
subring of R. This phenomenon has been analysed intensively for 
various specific rings, notably the reals R and cyclic groups Z/gZ. 
In this paper we consider the problem in arbitrary rings R, which 
need not be commutative or contain a multiplicative identity. We 
obtain rigorous formulations of the sum-product phenomenon in 
such rings in the case when A encounters few zero-divisors of R. 
As applications we recover (and generalise) several sum-product 
theorems already in the literature. 



I. Introduction 

1.1. The sum-product phenomenon. Let R = (R,0, +,—,-) be a 
ring (which need not be commutative, and need not contain a mul- 
tiplicative identity 1). Given any sets A, B C R, we define the sum 

set 

A + B := {a + b : a G A,b G B} 

the difference set 

A-B:={a-b:aeA,bEB} 
and the product set 

A ■ B := {ab : a G A,b G B}. 

We also define the iterated sum sets and iterated product sets 

nA := A + . . . + A; A n := A ■ . . . ■ A 

for n > 1, with the convention OA := {0}. We also write r-A :— {r}-A, 
A ■ r := A ■ {r}, and r + A = A + r:=A + {r} for any ring element 
r G R. If A is a finite set, we use \A\ to denote the cardinality of A. 

We let R* denote the collection of non- zero- divisors of R, i.e. the 
elements r G R such that ra, ar ^ whenever a ^ 0. Observe that R* 
is closed under multiplication, and that |r • A\ = \A ■ r\ = \A\ for any 
r G R* and finite A. 
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If A is a finite subring of R, then clearly = \A\ and |^4-^4| < 

with equality holding in the latter case if A contains at least one non- 
zero-divisor. The same holds if A is a dilate r • R or R ■ r of a commu- 
tative ring for some non-zero-divisor r. The remarkable sum-product 
phenomenon asserts a robust converse to this simple observation in 
many cases: very roughly speaking, it asserts that if A is a finite non- 
empty subset of a suitable ring R with A + A and A ■ A both having 
size comparable to A, then A should be "very close" to a ring (or a 
dilate of a ring), for instance A might be contained in a finite ring (or 
dilate of a finite ring) of size comparable to A. 

1.2. Prior results. The first rigorous demonstration of the sum-product 
phenomenon was by Erdos and Szemeredi [15] in the ring of integers 
Z, in which of course there are no non-trivial finite subrings. In this 
context they showed that for any finite non-empty set A C Z, one had 
\A + A\ + \ A ■ A\ > c\A\ 1+e \A\ for some c, e > 0, and conjectured that 
one can in fact take e arbitrarily close to 1. There is a substantial 
further literature on this problem [Hj, [SB], [12], [3H], [SH], 03, [13], 
[27J, [2H], [2H], PU, EH, [30], [33], [SZ], [3H], [SZ], [3H], B for instance, 
Solymosi [HS] recently showed that £ can be taken arbitrarily close to 
1/3 (and that the integers can be replaced with the reals). See [3S] 
for a brief survey of some other recent results in this direction. For a 
continuous version of the sum-product phenomenon in R (related to 
the Erdos- Volkmann ring conjecture [46] first solved in [JT]), see [3]; 
this result has applications to geometric measure theory |55j and the 
theory of invariant measures [19] and spectral gaps [22]. 

For the complex numbers C, Solymosi also showed in [64| that one can 
take e arbitrary close to 1/4. An earlier result of Chang [32] takes e 
arbitrarily close to 1/54, but allows R to be either C or the quarternion 
algebra, and also gives similar results (with non-explicit values of e) for 
finite-dimensional division algebras over R; see also another paper of 
Chang [31] which achieves a similar result for semi-simple commutative 
Banach algebras over R or C, and in particular in the infinite product 
spaces R z and C z . On the other hand, it was observed in [31] that e 
cannot exceed 1 — |^|| in those spaces. 

When R is a matrix ring over R or C, it was shown in [35J that + 
\A-A\ > f(\A\)\A\ whenever (A — A)\R* = {0}, for some function f(x) 
depending on R which goes to infinity as x — ► oo; in the case when A 
consisted entirely of real symmetric matrices, one could take f(x) = cx e 
for some c, e > depending on R (as in previous sum-product results). 
In the slightly different context of multiplicative matrix groups rather 
than rings, it was shown in [37] that when A C SLs(Z) was a finite 
non-empty set, then \ A ■ A ■ A\ > c|A| 1+e unless a large subset of A was 
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contained in a coset of a nilpotent subgroup; a similar result was also 
established for R = SL 2 (C) in the same paper, in which the nilpotent 
subgroup was now abelian. 

Now we turn to the case of finite characteristic. In the case when R is a 
finite field of prime order, which has no non-trivial subrings other than 
the full ring R, it was shown in [25] . [26] . [24] that for every 5 > there 
exists £ > and c > such that |v4 + A| + \A- A\ > c|v4| 1+e for all finite 
non-empty A G R with \A\ < |i?| 1_<5 . (Some upper bound on \A\ is of 
course necessary since \A + A\ and \A ■ A\ clearly cannot exceed \R\.) 
This estimate has numerous applications to exponential sums, number 
theory, combinatorics, and computer science; see [I], [5], [6], [TJ, [T8] . 
0, [IS], [20], [21], n In [Hj, it was shown that one could take e 
arbitrarily close to 1/14 if 5 > 6/13; a slight variant of this argument 
in [S3] showed that one can take e arbitrarily close to 1/13 if 5 > 1/2, 
and in [23] it was shown that one can take e arbitrarily close to 1/12 if 
5 > 11/23 and A + A is replaced by A — A. In [49] it was shown that 
one could take e = 5/2 if 5 < 1/3. Variants of these results for elliptic 
curves, or for exponentiated versions of the sum-product problem in 
finite fields, were obtained in [62], [63], [I]; generalisations to other 
polynomials than the product operation were considered in [HE]- Also, 
in [HS] a general embedding theorem was established which allowed one 
to transfer sum-product type theorems in finite fields to commutative 
integral domains of characteristic zero. 

When R is a more general finite field, the situation is more complicated 
due to the presence of non-trivial rings of intermediate size, namely the 
subfields of R and their dilates. In [251 Theorem 4.3] it was shown that 
if A C R is non-empty with \A + A\ + \A ■ A\ < K\A\ and \A\ > \R\ 5 
then there must be a subfield F of R of size \F\ < K° 6 ^\A\ and an 
invertible element a of F such that A C a ■ F + 0(K° 6 ^), where 0(N) 
denotes a non-empty set in R of cardinality O(N), and the subscripts 
in the OQ notation indicate that the implied constants can depend on 
8. In the converse direction, observe that if A C a ■ F + 0(K°^) then 
|v4 + v4| + = 0(K°^\F\), so this result is sharp up to polynomial 

factors in K and dependence on 5. In jHTJ Theorem 2.55] the hypothesis 
\A\ > \R\ S was removed, with the result also extending to infinite fields 
R (thus recovering in particular some of the sum-product theory in 
Z, R, and C). In [51] the following explicit variant was established: 
if \A + A\ + \A • A\ < c|A| 1+ 48 for some sufficiently small absolute 
constant c > 0, then there exists a set A' C A with \A'\ > |^4| 1— 48 and 
a subfield F of R of size \F\ < \A'\ 2 such that A' C a ■ F + h for some 
a,b G R. Other results of sum-product type in finite fields (or bounded 
dimensional vector spaces over such fields) in the case when A is large 
(e.g. \A\ > IF] 1 / 2 ) were obtained in [50], [51], [3Q]. 
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The case of more general cyclic rings R = Z/qZ than the fields of 
prime order is considered in [T7], [IB], [21], [ID]; m particular, it was 
shown in pig that if A C i2 and 1 < |A| < and |tt 9i (A)| > 

for all gi|g with gi > g e for some sufficiently small e = 6(61,62) > 
0, where n qi : R — > Z/giZ is the projection homomorphism, then 
|y4 + y4| + |y4-A| > q Sa \A\ for some 6 3 = 6 3 (6 1 ,6 2 ) > 0. Similar results for 
rings such as R = Z/pZxZ/pZ also appear in [3], [S], [7]. Applications 
of these estimates to exponential sums appear in [TU], [2], (ID) . [TT] . 

Finally, we mention the result of Helfgott [S2] that shows that if A C 
SL 2 (F p ) with \A\ < p 3 ~ s , and A is not contained in any proper sub- 
group, then \A • A • A\ > c|A| 1+e for some c, e > depending only on 
6 > 0. This result (and variants for other groups, including continuous 
groups such as SU(2)) has applications to expander graphs, sieving, 
and diophantine approximation: see [20], [21] . 

1.3. New results. In this paper we study the sum-product phenome- 
non in arbitrary rings R, which need not be commutative or to contain 
a multiplicative identity 1. In doing so one must make some sort of 
assumption to avoid too many zero divisors; in the most extreme case, 
when the product operation is identically zero, then A ■ A is always just 
{0}. There does not appear to be any canonical way to get around this 
issue; for us, it will be convenient to make two (related) non-degeneracy 
assumptions. The first is that A ■ A is not much smaller than A; the 
other is that A — A does not have an extremely large number of zero- 
divisors. These assumptions seem to be reasonable in situations in 
which the set of zero-divisors in R is very sparse; it would be of inter- 
est to weaken our hypotheses to handle rings with many zero-divisors3, 
but we will not do so here. 

Our results are of the following general form: if A is a finite non- 
empty subset of a ring R for which certain additive and multiplicative 
combinations of A are small, and A is non-degenerate in the sense 
described above, then A can be efficiently contained in a ring, or a 
slight modification of a ring. 

The simplest case is if we assume that A + A- A is small (comparable to 
A in size). Examples of such sets include finite subrings S C R of R, as 
well as dense subsets of such rings. Our first result, roughly speaking, 
asserts (in the non-degenerate case) that these are in fact the only such 
sets with this property. 

1 In particular, our results here do not fully recover the results in Z/qZ mentioned 
above in the case when q has many small divisors. Indeed, it seems to the author 
that this case requires a genuinely multiscale analysis and so may in fact be beyond 
the purely elementary approach used here. 
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Theorem 1.4 (Inhomogeneous sum-product theorem). Let R be a 
ring, and let A C R be finite and non-empty. Suppose that \A+A-A\ < 
K\A\ and \A • A\ > \A\/K for some K > 1. Then at least one of the 
following holds for some absolute constant C > 0: 

(i) (A — A has many zero divisors) We have \(A — v4)\i?*| > 
C^K-^A]; or 

(ii) ( Subring structure ) There exists a finite subring S of R such 
that Ac S and\S\ <CK C \A\. 

Note in the converse direction that if A C S for some finite subring S 
and \S\ < K\A\, then \A + A ■ A\ < \S\ < K\A\, and so the conclusion 
here is reasonably sharp up to polynomial losses. Also, the hypothesis 
|A-^4| > | .A | /if is automatic if A contains at least one non-zero-divisor. 

The hypothesis that A + A ■ A is small is inhomogeneous in the sense 
that it is not preserved by dilations A i— »■ r • A (of course, the property 
of being a subring is also not homogeneous). Let us now consider the 
homogeneous case when A ■ A — A ■ A is small; examples of such sets 
A include dilates a ■ S of finite rings S for an invertible element a 
(assuming R has an identity), as long as a normalises S in the sense 
that a ■ S = S ■ a. We can obtain a converse to this claim, similarly 
to Theorem 11.51 under the additional assumption that A contains an 
invertible element: 

Theorem 1.5 (Homogeneous sum-product theorem with invertible el- 
ement). Let R be a ring with identity, and let A C R be finite and 
non-empty. Suppose that \A ■ A — A ■ A\ < K\A\ and \ A ■ A\ > \A\/K 
for some K > 1. Suppose also that A contains an invertible element a. 
Then at least one of the following holds for some absolute constant C: 

(i) (A — A has many zero divisors) We have \(A — A)\R*\ > 
C^K^lAl; or 

(ii) (Subring structure) There exists a finite subring S of R such 
that Ac a- S = S -a and \S\ < CK C \A\. 

Now we consider the homogeneous case in more generality, when R 
need not contain an identity and A need not contain an invertible 
element. In this case, there are more examples of sets that have good 
additive and multiplicative properties. For instance, if S is a finite ring 
and S[t] := {J2t=o a ^ n '■ Q o, • • • , &d € S; d > 0} is the polynomial ring 
generated by S and a formal variable t that commutes with S, then the 
set A := S ■ t in the ring S[t] ■ t of polynomials with no constant term 
is such that \A + A\, \A ■ A\,\A ■ A — A ■ A\ < \A\, but S[t] ■ t contains 
no non-trivial finite subrings. Of course, this obstruction is artificial in 
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nature because the ambient ring S[t] ■ t can be embedded in a larger 
ring, such as the polynomial ring S[t] or the Laurent polynomial ring 
S(t) generated by S, t, and a formal inverse t^ 1 to t, which does contain 
finite subrings, in particular the ring S of constant polynomials, and 
once we embed into this larger ring, then A does become efficiently 
captured by a dilate of a subring. 

A generalisation of the above example occurs when one has a finite ring 
S with an (outer) ring automorphism <p : S —>■ S. Then one can form 
the twisted polynomial ring S [£]</, generated by S and a formal variable 
t with the relations ta = <p{a)t for all a G S, or the larger twisted 
Laurent polynomial ring S(t)<^ generated by S, a formal variable t, and 
its formal inverse t~ l with the relations ta = <p(a)t (or equivalently 
at^ 1 = £ _1 </>(a)) for all a G S. Then, as before, the set A :— S ■ t — t ■ S 
in the ring S[t]^,-t is such that + \ A- A\, \A- A- A- A\ < \A\, but 
A is not contained efficiently in a dilate of a subring until one embeds 
that ring into S[t]^ or S(t)^. 

We can now present a converse statement. 

Theorem 1.6 (Homogeneous sum-product theorem in general). Let 

R be a ring, and let A C R be finite and non-empty. Suppose that 
\A ■ A - A ■ A\ < K\A\ and \A-A\> \A\/K for some K > 1. Then at 
least one of the following holds for some absolute constant C > 0: 

(i) (A — A has many zero divisors) We have \(A — A)\R*\ > 
C- l K~ c \A\; or 

(ii) (Ring structure in a Freiman model) There exists a finite ring 
Rq of cardinality between \A\ and CK C \A\, an outer automor- 
phism (ft : R — > Ro of that ring, and embeddings L n : (A n ) — > 
Ro't n from the additive group (A n ) generated by the n-f old prod- 
uct set A n := A • . . . ■ A to the degree n component Rq ■ t n of 
the twisted polynomial ring Ro\t]$ such that the i n are additive 
homomorphisms, and that L n (g n )L m (g m ) = L n+m {g n g m ) for all 
n,m>l and all g n G (A n ) and g rn G (A rn ). 

Observe that if A, R , <fr, i n are as in (ii), then A ■ A — A ■ A C (A 2 ) has 
cardinality at most |i?o| < CK so the conclusion (ii) is efficient 
up to polynomial losses. It may be possible to combine all the separate 
embeddings i n : (A n ) — > Rq ■ t n into a single embedding of the ring 
generated by A into some suitable ring extension of Rq, but we were not 
able to achieve this, and in any event the "Freiman-type" or "graded 
ring homomorphism" collection of embeddings i n (somewhat analogous 
to the embeddings i n : nA nB associated to a Freiman isomorphism 
L\ : A — > B of order at least 2n, see [67J Section 5.3]) suffice for the 
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purposes of studying (homogeneous) iterated sum and product sets of 
A. 

Finally, we return to the traditional hypotheses for the sum-product 
phenomenon, in which we wish to classify the cases in which A + A 
and A ■ A are small. For this we record a non- commutative version 
of the "Katz-Tao lemma" originating in [55] (see also [25]) and then 
simplified in [7] (see also [671 Lemma 2.53]), which lets us pass from 
a set A with A + A and A ■ A both small, to a slightly smaller set A' 
with A' ■ A' — A' ■ A' both small, as long as we first throw away all zero 
divisors: 

Lemma 1.7 (Katz-Tao lemma). Let R be a ring, and let A C R* be 

a finite non-empty set of non-zero-divisors such that \ A + A\, \A ■ A\ < 
K\A\ for some K > 1. Then one of the following holds: 

(i) (A — A has many zero divisors) \ {A — A)\R*\ > C^K \A\ for 
some absolute constant C > 0; 

(ii) (Existence of good subset) There exists a subset A' of A such 
that \A'\ > \A\/2K and \A' ■ A' - A' ■ A'\ = 0{K°^\A'\). 

The commutative version of this claim (without the need for the option 
(i)) was established in [671 Lemma 2.53]. We do not know if the option 
(i) can similarly be removed in the noncommutative setting; one may 
need to first strengthen the bound \ A ■ A\ < K\A\ to \A ■ A ■ A\ < K\A\ 
for this (cf. [66]). 

Our methods here are elementary, relying entirely on Pliinnecke-Ruzsa 
sum set theory (see e.g. [H7J Chapter 2] for a detailed treatment of this 
topic), and an analysis of certain key sets S r defined in ( 13.1)1 . which 
roughly speaking contain the elements x G R for which x ■ A and r ■ A 
are "parallel". 

These elementary methods are able to treat sum-product estimates 
in any ring that does not have too many "scales"; the sum-product 
phenomenon in multi-scale situations such as continuous subsets of 
R [3j, or subsets of Z™, Z p [t}/(t m ) or Z p ™ [9] for large m seem to 
require a more sophisticated analysis which we do not study further 
here, due to the presence of many zero- divisors. By the same token, 
however, due to the soft and elementary nature of our methods, our 
results do not distinguish between finite or infinite rings, or between 
zero characteristic and positive characteristic. 

1.8. Organisation of the paper. In Section [2] we recall the (stan- 
dard) sum set estimates from Pliinnecke-Ruzsa theory that we shall 
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need, together with a proof of Lemma 11.71 in Section 12. 51 In Section [3] 
we prove the key proposition, Proposition 13. 1\ that analyses the sets 
S r mentioned above, allowing us to quickly prove our main theorems 
in Section HI In the final section, Section \5\ we specialise our theorems 
to specific rings such as division rings (or boundedly many products of 
division rings), cyclic groups, and algebras, to illustrate the results and 
also to recover some (but certainly not all) of the earlier sum-product 
results in the literature. 

1.9. Acknowledgments. The author thanks Emmanuel Breuillard for 
posing this question, Jean Bourgain, Elon Lindenstrauss, Alex Gam- 
burd, and Lior Silberman for useful discussions, Igor Shparlinski and 
Van Vu for some references, and an anonymous commenter and the 
anonymous referee for some corrections. The author is supported by 
NSF grant DMS-0649473 and a grant from the Macarthur Foundation. 

2. Sum set estimates 

We recall some basic estimates from the Pliinnecke-Ruzsa theory of 
sum set estimates, as recorded for instance in [63, Chapter 2]. 

Lemma 2.1 (Ruzsa triangle inequality). [60] If A,B,C are finite non- 
empty subsets of an additive group G, then \A — C\ < \A — B\\B — 
C\/\B\. 

Proof. From the identity a — c = (a — b) + (b — c) we see that every 
element of A — C has at least \B\ representations as the sum of an 
element of A — B and an element of B — C. The claim follows. □ 

Lemma 2.2 (Ruzsa covering lemma). [61] If A, B are finite non-empty 
subsets of an additive group G, then A C B — B + 0( ^| ), Q-nd simi- 
larly A C B — B + O(-^p^p). (Recall that O(N) denotes an unspecified 
finite non-empty set of cardinality O(N).) 

Proof. Let X be a maximal subset of A with the property that the sets 
x + B for x G X are disjoint. One easily verifies that |-B||A| < \A + B\ 
and that A C B — B + X , and the first claim follows. The second claim 
follows by replacing B by — B (note that B — B remains unchanged by 
this reflection). □ 

Lemma 2.3 (Pliinnecke- Ruzsa sumset estimate). Let A,B be finite 
non-empty subsets of an additive group such that \A + B\ < K\A\ and 
B > \A\/K. Then one has \n 1 A-n 2 A+n 3 B-n 4 B\ < K ^^™^ 1 )^ 
for all ni,n 2 , n 3 , n 4 > 0. 
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We will also routinely use elementary identities and inclusions in rings 
R such as 

A-B±A-CcA-{B±C) 
a-A±a-B = a-(A±B) 
{A-B)-C = A-{B-C) 
(A + B)+C = A + (B + C) 
A + B = B + A 
0(N) + O(M), 0(N) ■ O(M) = O(NM) 
for A, B,C C R, a G R, and N, M > 1 without any further comment. 

Remark 2.4. There is also a non- commutative version of the above 
theory for use in multiplicative groups, see [66] • We will avoid using 
this theory here, though, since the multiplicative structure of a ring 
is not quite as strong as that of a group, even if we restrict to the 
cancellative semigroup R* of non-zero-divisors. It seems of interest to 
develop such a theory for this semigroup, though. 

2.5. Proof of Lemma 11.71 We can now prove Lemma [1.71 Let A, K 
be as in that lemma. From the identities 

\A\ 2 = \{(a,b) G A x A : ah = x}\ 

xeA-A 

and 

\{(a, b) e A x A: ab = x}\ 2 = ^ \a-AC\A-b\ 

xeA-A a,feeA 

we conclude that 

E \a-AnA.b\>-^->\A\yK. 

a,b€A ' ' 

Since \a ■ A n A ■ b\ < \A\, we conclude that \a ■ A n A ■ b\ > \A\/2K 
for at least \A\ 2 /2K pairs (a, b). By the pigeonhole principle again, we 
can find b G A such that the set 

A' := {a e A : \a ■ A n A ■ b\ > \A\/2K} 

has cardinality at least \A\/2K. 

Now let a, a' G A'. Then 

| (a ■ A n A ■ b) + A ■ b\ < \(A + A) ■ b\ < K\A\ 

and 

| (a • A n A ■ b) + a ■ A\ < \a ■ {A + A)\ < K\A\ 
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and thus by the Ruzsa triangle inequality (Lemma 12.11) we have 

\a-A-A-b\< 0{K° {1) )\A\ 
and thus by the covering lemma (Lemma 12. 2h 

a- Ac A-b- A-b + 0(K 0{1) ). (2.1) 

Similarly 

a' -Ac A-b- A-b + 0(K° w ). 
Multiplying the latter by a we conclude 

aa' ■ Ada- A-b-a- A-b + 0(K 0{1) ) 

and hence by (12.11) we have 

aa' ■ A c A ■ b 2 - A ■ b 2 + A ■ b 2 - A ■ b 2 + 0(K 0{1) ) 

and thus if a", a'" are also in A' then 

(aa' - a" a'") ■ A C (A A - AA) ■ b 2 + Q(K°^). 

In other words, for each d G A' ■ A' — A' ■ A' we have 

d ■ A C (AA - AA) ■ b 2 + 0(K 0{1) ). 

By the pigeonhole principle, for each such d we can find x G R and3 
> K'° W \A\ elements a in A such that da G (AA - AA) ■ b 2 + x, and 
thus we can find ^> K~°^\A\ 2 pairs a, a' G A such that d(a — a') G 
(8A - 8A) ■ b 2 , and thus there are > K-°^\A\ elements / of A - A 
such that df G (8 A — 8 A) ■ b 2 . Since we may assume we are not in 
option (i) for some suitable choice of constants c, C > 0, we conclude 
that there are > K~°^\A\ pairs (f,g) G (A - A) n R* x (8 A - 8A) 
such that df = gb 2 . But each pair (f,g) can be associated to at most 
one d, thus 

\A' ■ A' - A' ■ A'\ < K° {l) \A - A\\8A - 8A\/\A\ 
and hence by sumset estimates (Lemma 12.31) 

\A' ■ A' - A' ■ A'\ <^K° {1) \A\ 
and the lemma follows. 

3. The key proposition 

Our analysis of sets A with good additive and multiplicative proper- 
ties will hinge around the properties of certain very structured sets SV 
associated to each ring element r G R, which roughly speaking corre- 
sponds to the "dilate" of A (or of the "completion" of A) that contains 
r. The precise structure theory we need is contained in the following 
proposition. 

2 Here and in the sequel we use I < 7 or f > I to denote the estimate 
X < CY for some constant C. 
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Proposition 3.1 (Basic construction). If Co > is a sufficiently large 
constant, then the following statements hold. Let R be a ring, and let 
A C R be a non-empty finite set. Suppose that \A • A — A • A\ < K\A\ 
and \A-A\ > \A\/K for some K > 2, and suppose that \(A — A)\R*\ < 
K~ C °\A\. For each r G R, define the set 

S r := {x G R: \x- A + r- A\ < K c ° \A\}. (3.1) 

(i) (Self- improving property) Ifr^R* and x G S r , then \x ■ A + r ■ 
A\<K°®\A\. 

(ii) (Size bound) If r G R* , then \S r \ < K°^\A\; in particular, S r 
is finite. 

(iii) (Additive structure) If r G R* , then S r is an additive group. 

(iv) (Ring structure) If R has an identity 1, then S\ is a ring. 

(v) (Right-multiplicative structure) If r G R* and a G (A — A)OR*, 

then Sr ' Sq G (S^a- 

(vi) (Left-multiplicative structure) Ifr,sER then s ■ S r G S sr . 

(vii) (Reflexivity) For every r G R, we have r G S r . 

(viii) (Symmetry) If r,s G R, then r G S s if and only if s G S r . 

(ix) (Transitivity) Ifr,s G R* and S r fl S s fl R* ^ 0, then S r = S s . 

Remark 3.2. The results here can be viewed as a refinement of the 
analysis of the "good" elements x (for which x-A C A — A + 0(K ^)) 
in [25l Proposition 3.3]. 

Proof. We first make the observation that if A-A\ < K\A\, then 

by sum set estimates (Lemma l2.3l) we have lA-A + A-A — A- A — A-A\ < 
K°M\A\ and thus \(A — A) • (A — A)\ < K°V>\A\. Since A- A contains 
at least one element in R*, we conclude in particular that 

\A- A\ < K° {l) \A\. (3.2) 

We now show the (crucial) self-improving property (i). Let r 6 ff, 
and let x G S r . The map (d, a 2 ) — > xa\ + ra 2 maps A x A to a set of 
cardinality at most -fC- 70 1 ^4. | - By Cauchy-Schwarz, we can thus find at 
least 1 A| 3 quadruplets ( )eAxAxAxA such that 

xa\ + ra 2 = xa[ + ra' 2 , or equivalently x{a\ — a[) = r(a' 2 — 02). Since 
each difference d G A — A can be represented at most \A\ times in the 
form a — a' for a, a' G A, we conclude that there are at least i^ _c, °|y4| 
elements d,d' G A — A such that xd = rd'; since r is not a zero-divisor, 
we conclude that there are at least K °\A\ elements d G A — A such 
that xd G r ■ (A — A). Thus there exists at least one d G (A — A) fl i?* 
such that G r • (A — A). 



3 Indeed, the self-improving property allows us to absorb all losses of which 
arise from our heavy use of the Plunnecke-Ruzsa sumset theory. 
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Let d be as above. Then we have xd ■ A G r ■ (A ■ A — A ■ A). On 
the other hand, as d is not a zero-divisor, we have \d ■ A\ = \A\. Since 
\A-A\ > |A|/ATand \d-A-A-A\ C \A- A- A- A- A- A\ < K°^\A\ (by 
Lemma 12.31) . we see from Ruzsa's covering lemma (Lemma 12.21) that 
A- Add- A-d- A + 0(K°^). Thus 

x-A-A C r-(A-A-A-A)-r-(A-A-A-A)+0{l) = r-{2{A-A)-2{A-A))+0{K 0{1) ) 
and thus 

(x • A + r • A) • (A — A) C r • (5(A ■ A) - 5(A ■ A)) + 0(K 0{1) ). 
By sum set estimates we conclude 

\(x ■ A + r ■ A) • (A — A)\ < K° {1) \A\. 
Since A — A contains at least one non-zero divisor, the claim (i) follows. 

Now we prove the size bound (ii). Let r G R* and let x G S r . By the 
self-improving property we have \x • A + r • A\ < K°^ 1 '\A\. Arguing as 
in the proof of (i), we have at least K~°^ \A\ elements d G A — A such 
that xd G r • {A — A) . If Co is large enough, we can thus find at least 
K~°W\A\ pairs (d, d') G (A- A) x (A- A) such that xd = rd! and d is 
not a zero-divisor. But each such pair (d, d') corresponds to at most one 
x, while the total number of pairs (d,d') is at most \ A-A\ 2 < K°^\A\ 2 
by (13. 2p . The claim (ii) follows. 

Now we show (iii). Let r G R*. If x, y G S r , then |x-A+r-A| < \A\ 
and \y • A + r • A\ < K°^\A\. By the Ruzsa covering lemma (Lemma 
12. 2p we conclude that 

x- A C r • A-r ■ A + 0{K 0{1) ) (3.3) 

and similarly 

y-Acr-A-r-A + 0{K 0{1) ), (3.4) 

and thus (x + y)-A + r-Acr - (3 A - 2 A) + 0(K 0{1) ). Applying the 
sumset estimate (Lemma 12.31) . we obtain \ (x + y) ■ A + r ■ A\ < i^ ^)|^4|, 
and so x + y G 5* if C is large enough. Thus S is closed under addition; 
since it is also finite, it must be an additive group. This establishes 
(iii). 

Now we prove (iv). In view of (iii), it suffices to show that Si is closed 
under multiplication. Let x, y G Si, thus by (i) we have \x • A + A\, \y ■ 
A + A\ <K°W\A\. Multiplying y- A + A by x we have \xy ■ A + x-A\ < 
K°^\A\, and thus by Ruzsa's triangle inequality (Lemma l2.ip and sum 
set estimates (Lemma 12. 3p we have \xy • A + A\ < K°^\A\, and thus 
(if Co is large enough) xy G Si, yielding the desired closure property. 

Now we show (v). Let r G R* and a G (A — A) H R* , and let x G S r and 
y G S a . By (i), we have \x ■ A + r ■ A\ < and \y ■ A + a ■ A\ < 
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K°^\A\. Also, we have 

a-A + A-acA-A-A-A + A- A- A- A 
and thus by sum set estimates 

\a-A + A-a\ < K° W \A\ 
and thus by the Ruzsa triangle inequality 

\y-A + A-a\< K° W \A\ 
and thus by the Ruzsa covering lemma 

y ■ A C A ■ a - A ■ a + 0{K 0{1) ). 
Multiplying by x we obtain 

xy-Acx-A-a-x-A-a + 0(K 0{1) ). 
Meanwhile, by the Ruzsa covering lemma again we have 
x- A C r • A-r ■ A + 0(K 0{1) ) 

and thus 

xy ■ A C r • 2A ■ a - r ■ 2A ■ a + 0(K 0{1) ). 
But by the covering lemma again we have 

A-ada- A-a- A + 0(K°^) 

and thus 

xy ■ A C ra ■ AA - ra ■ AA + 0(K 0(1) ) 

and thus 

\xy ■ A + ra- A\< K° {1) \5A - AA\. 

By sum set estimates we thus have \xy ■ A + ra ■ A\ < K°^\A\, and so 
xy G S ra . The claim (v) follows. 

Clearly (vi) and (viii) are immediate from (13.1 1) , while (vii) follows from 
f)3.2p . so we now turn to (ix). Let r,s,t G R* be such that t G S r H S s . 
Then by (i) we have |t-A+r-A|, |t-^4+s- y4| < i<T°W and hence by the 
covering lemma (Lemma l2.2l) we have r-A C t-A — t- A + 0(K°^) and 
t-A C s-A-s-A+0(K°W), and thus r-A C s-{2A-2A) + 0{K°^). 
If x G S s , we thus have 

\x ■ A + r ■ A\ < K 0( - 1] \x ■ A + s ■ A + s ■ A - s ■ A - s ■ A\ 

and hence by (i) and sum set estimates (Lemma 12.31) 

\x- A + r ■ A\ < K° m \A\ 

and thus x G S r . This shows that S s C S r ; a similar argument gives 
S r G S s , and the claim follows. □ 
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4. Proofs of theorems 

With the key proposition in hand, we can now quickly conclude the 
main theorems of the paper. 

4.1. Proof of Theorem 11.41 By increasing K if necessary we may 
take K > 2. Let A be as in the theorem. By sumset estimates (Lemma 
I2.3p we have \A • A — A • A\ < K°^\A\; by increasing K if necessary 
we can assume \A • A — A • A\ < 

Let Cq be a sufficiently large absolute constant. We may assume that 
\(A — A)\R*\ < K °\A\, since the claim is trivial otherwise. We 
set S := Si, where S r is defined in ( 13. lft . By Proposition I3.1( ii) we 
have | S \ < K°^\A\; by Proposition I3.1( iv) S is a ring. Finally, since 
|v4 + v4-v4| < K\A\, we have A d S by (IHTTj) . if C is large enough. The 
claim follows. 

4.2. Proof of Theorem 11.51 Again we can take K > 2. Let A be 
as in the theorem with an invertible element a, and let Co be a suffi- 
ciently large absolute constant. Again we may assume \(A — A)\R*\ < 
K~ Co \A\. 

We set S := Si again. Using Proposition I3.1( ii) as before, we have 
\S\ < K°^\A\, and from Proposition 0» S is a ring. 

By sum set estimates (Lemma 12.31) . we have \A- A + A- A\ < K°^\A\. 
Since a 6 A, we conclude that | A ■ A + a ■ A\ < K°^ 1 '\A\; since a is 
invertible; we thus have |a _1 • A • A + A\ < K°^ 1 '\A\, and thus (if Cq is 
large enough) a -1 • A C S, and thus A C a ■ S. 

The only remaining task is to show that a ■ S = S ■ a. Since S is finite 
and a is invertible, it suffices to show that a ■ S ■ a -1 C S. Now let 
x G S. Since A C a ■ S, and S is a ring, we have 

axa' 1 ■ A + A C a ■ S ■ a~ l ■ a ■ S + a ■ S = aS 

and thus 

\axa~ 1 ■ A + A\ < \S\ < K 0{1) \A\ 
and thus axa^ 1 £ S by (13. ip . This shows that a-S-a -1 C S 1 as claimed. 

Remark 4.3. It is also possible to deduce Theorem 11.51 from Theorem 
11.41 by applying the latter theorem to a" 1 • A, though one does need 
to invoke the sum set estimates (in a manner very similar to that 
performed above) to verify that a~ l ■ A obeys the required hypotheses 
for a suitable choice of K. We leave the details as an exercise to the 
reader. 
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4.4. Proof of Theorem 11.61 Again we can take K > 2. Let A be as 

in that theorem. Let Co > be a large absolute constant; as before 
we may assume that \(A — A)\R*\ < K~ C °\A\. In particular we can 
find an element a G (A — A) D R*. By hypothesis and (13.1 j) we see that 
A C S a . 

For each n > 1, let G n :— (A n ) be the additive group generated by the 
n-fold product set A n := A ■ . . . ■ A. Observe that G n ■ G m C G n+m 
for all n, m > 1. Also, by Proposition I3.1( iii) we have Gi C S a , so by 
Proposition I3.1( v) and induction we have G n C S a n for all n > 1. In 
particular, from Proposition I3.1( ii) we have 

\G n \<K°M\A\ 

for all n. On the other hand, since a ■ G n C G n+ \, we know that \G n \ is 
a non-decreasing function of n. Thus the quantity N := lim^oo \G n \ 
is finite (and takes values between \A\ and and furthermore 

we have \G n \ = N for all sufficiently large n. In particular, we see that 
the map x \— > ax is a bijection from G n to G n+ \ for all sufficiently large 
n. 

For every integer d G Z, define a partial dilation T = (T n )^ no of 
degree d to be a sequence of additive homomorphisms T n : G n — > 
G n+ d defined for all n > no and some no > max(l, 1 — d) such that 
T n+m (g n g m ) = T n (g n )g m for all n > n Q , m > 1, g n G G n , and # m G 
G m . We say that a partial dilation is maximal if one cannot decrease 
n (and add additional homomorphisms T n ) without destroying the 
partial dilation property. We observe some key examples of partial and 
maximal dilations: 

(a) The identity sequence (g n ^ g n )^Li, where g n denotes a variable 
in G n , is a maximal dilation of degree 0. 

(b) For any m > 1 and h G G m , the sequence (g n t— > hgn)^ 3 ^ is a 
maximal dilation of degree m. In particular every element of A 
gives rise to a maximal dilation of degree 1 in this manner. Also 
this construction associates to a maximal dilation of degree 
m for each m. 

(c) For all n larger than a sufficiently large constant no, we have 
seen that the map g n -\ | — ► OflVi-i from G n -\ to G n , and thus has 
an inverse ag n ^ ^ g n _ x . The sequence (a^ n _i i-> g n ^{)^ =no is 
thus a partial dilation of degree — 1. 

(d) If (T n )™ =m and (T^)^ n ^ are partial dilations of the same degree 
d, then (T n + T^)^L max(no is also a partial dilation of degree d, 
where of course T n +T^ : G n — > G n+ d is the map x i— > T n x + T^x. 
Similarly, (— T n )^i is also a partial dilation of degree d 
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(e) If (T n )^L and (T^)^ =n , are partial dilations of degree d and d! 
respectively, then (T n+d ' oj 1 ^)" is a partial dilation of degree 
d + d! for rii : = max(nQ, n — d'). 

Suppose that we have two partial dilations (T n )%L no and (T^)^L n , which 
collide in the sense that T m = T' n for some ri\ > max(no, n' ). We then 
claim that in fact T n = T' n for all n > max(no, n' ). To see this, we first 
observe from the identities T n (x)a m = T n (xa m ), T^(x)a m = T^(xa m ) 
and the fact that a m is not a zero divisor for any m > 1 that it suffices 
to establish this for sufficiently large n. But when n is large enough, we 
have \G n \ = |G n _ ni | = N and so the map x i— > a ni x is a bijection from 
G n _ ni to G n . Since T ni (a ni ) = T^a™ 1 ), we conclude that T n = as 
required. We conclude in particular that every partial dilation has a 
unique maximal extension. 

For each d G Z, let -R^ denote the collection of all maximal dilations 
of degree d. From the previous paragraph and (d) we can give R d the 
structure of an additive group. Also, from the previous paragraph and 
(e) we can define a product operation • : Rd x Rd' — * Rd+d 1 which 
is associative and is distributive over the additive structure, thus the 
direct sum ® dGZ Rd has the structure of a (graded) ring; in particular 
R is itself a ring. From (a) we have a multiplicative identity 1 G R\ 
in this ring, while from (b) we can embed G n into R n in a manner 
preserving the additive and multiplicative structure. (The embedding 
is injective, as can be seen by testing the resulting dilations on a non- 
zero-divisor such as a.) In particular, the element a can be identified 
with an element t of R\. Finally from the previous paragraph and (c) 
we see that we can construct an inverse t _1 G R-i which is both a right 
and left inverse of t. In particular, Rd = Rot d = t d Ro for all d G Z. We 
thus see that the ring @ deZ Rd is isomorphic to the the ring i? (^)</>, 
where : R$ — > R® is the outer automorphism <p : r i— > trot' 1 , and we 
can embed G n with elements of i? i n in this ring. 

Finally, we observe that if we have two elements (T n )^ and (T^)^L n , 

of i?o such that T„(a") = T' n (a n ) for some n > max(no,rio), then (since 
the map x \— > a n x is a bijection from G m to G m+n for sufficiently large 
m) we conclude that T m+n = T' mJ _ n for sufficiently large m, and thus 
the maximal extensions (T n )?L„„ and (T')°° , must be identical. On 

\ '*'/ It — ItQ \ ft/ TL — 7i,Q 

the other hand, T n (a n ) takes values in a set of size at most N. We 
conclude that Ro is finite with cardinality at most iV < .fC ^ 1 ^ ]^4| . (In 
fact, since R contains t~ n G n for every n > 1, we see that R has 
cardinality exactly N.) The claim follows. 

Remark 4.5. In the case when the original ring R is commutative, one 
can show that all maximal dilations commute with each other, so that 
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R is commutative and the twist map used to define -Ro is m f ac t 
trivial; we leave the verification of this as an exercise to the reader. 
Thus in this case one can embed A into the commutative polynomial 
ring R [t}. 

5. Special cases 

We now specialise the above theory to various special cases of interest. 
Broadly speaking, our results are useful in any context in which the set 
of zero divisors is sparse and has an easily understood structure; this 
covers many (but definitely not all) cases of interest. 

5.1. Division rings. The simplest application is to division rings, 
since in this case every non-zero element is invertible (and thus not 
a zero-divisor): 

Theorem 5.2 (Sum-product phenomenon in division rings). Let D be 

a division ring, and let A be a finite non-empty subset of D such that 
\A + A\,\A ■ A\ < K\A\ for some K > 1. Then there exists a finite 
subring S of D of cardinality \S\ <C and an invertible element 

ae A such that a - S = S ■ a and A C a ■ S + 0(K 0{1) ). 

For the case when D is commutative (i.e. D is a field, this is [S7[ 
Theorem 2.55]). For finite-dimensional division rings over R, such as 
the quaternions, this result is in [32]. Note that this result also implies 
the original sum-product result of Erdos and Szemeredi [32] in Z, as 
well as the sum-product result over finite fields in [25], [26], [23] • One 
also recovers the sum-product estimates from [69] for integral domains 
of characteristic zero, since these domains can be embedded inside their 
field of fractions and contain no finite subrings. 

Proof. We can assume that \A\ > CK C for some large C, since the 
claim is trivial otherwise. Applying Lemma 11.71 (removing from A if 
necessary) we can find a subset A' of A with \A'\ K~°^\A\ such that 
\A''A'—A''A'\ <C (since there are not enough zero divisors for 

option (i) to hold). Applying Theorem 11.51 with a equal to an arbitrary 
non-zero (and hence invertible) element of A', we conclude that there 
exists a finite subring S of D of cardinality |5| < \A'\ < K°^\A\ 
with a-S = S-a such that A' C a-S. Since + < \A + A\ < K\A\, 
the claim then follows from the covering lemma (Lemma 12.21) . □ 



5.3. Products of division rings. After division rings, the next eas- 
iest case to study is the product R = D\ x . . . x D k of a bounded 
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number k = 0(1) of division rings (with the obvious pointwise ring 
operations), since in this case the zero divisors of R are easily iden- 
tified and have a clean and sparse structure, indeed we have R* = 
(£>i\{0}) x ... x (D k \{0}). A model example here is F p x F p ; the sum- 
product phenomenon in this ring was first studied by Bourgain [3], [5], 
[7j in connection with exponential sums connected to the Diffie-Hellman 
cryptosystem, and also to certain exponential sums of Mordell type. 

Our main result here is as follows. 

Theorem 5.4 (Sum-product phenomenon in products of division rings). 
Let Di, . . . , Dk be division rings, let R := D\ x . . . x _D fe; and let A C R 
be a non-empty finite set such that \A + A\, \ A • A\ < K\A\ for some 
K > 1. Then one of the following holds: 

(i) There exists 1 < j < k such that \iTj(A)\ <C kK°( l > , where 
7ij : R — > Dj is the projection homomorphism. 

(ii) There exists a finite subring S of R of cardinality \S\ -C ^fC ^ 1 -* | ^4 1 
and an invertible element a G A such that a ■ S = S ■ a and 
Aca-S + 0(K°V). 

This result implies the sum-product theorems in pE], [5], [7] for the 
ring F p x F p as a special case, after noting that the only non-trivial 
proper subrings of F p x F p are of the form F p x {0}, {0} x F p , or 
{(x, ax) : x e F p } for some a G F* Note that the results cited treat 
the case when K > p e for e > 0, but Theorem 15.41 can also be applied 
for much smaller values of K (though this is not the case of interest for 
exponential sum applications). It also largely recovers the sum-product 
estimates in [T7j, [IB] . 

For applications to exponential sums, the above theorem is only useful 
when k is small; when k is large, the conclusion (i) becomes weak unless 
K is small compared to mini^x*; \Dj\, which is not the case of interest 
in these applications. In particular, we do not recover the sum-product 
theorem for Z p for fixed p and large k that appears in [9], [10], [llj . 

Proof. Suppose first that A — A contains ^> ff~°W|yl| zero- divisors, 
then by the pigeonhole principle there exists 1 < j < k such that the set 
Aj := (A-A)n-Kj 1 ({0}) has cardinality > K~ ^\A\/k. Observe that 
\A + Aj\ > \iTj(A)\\Aj\ due to the disjointness of the fibres 7r~ ({dj}) 
for aj G Dj. On the other hand, by sum set estimates (Lemma 12.31) we 
have 

\Aj + A\ < \A - A + A\ < K° (1) \A\ 

and thus 

1^(^)1 < kK°^ 
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and then we are in case (i). 

We may thus assume instead that A — A does not contain so many 
zero-divisors. The above argument also shows that we may assume that 
\Aj\ < cK~ c \A\/k for any fixed c, C > and all j, which implies that 
|ylri7r^ 1 ({0})| < cK~ c \A\/k In particular, at most half of the elements 
of A are zero- divisors. By removing such elements (and increasing 
K slightly) we may thus assume that A C R*. We can now apply 
Lemma O to find a subset A' d A with \A'\ > K~ 0{1) \A\ such that 
\A' ■ A' - A' ■ A'\ < K°^\A'\. Applying Theorem O (and noting 
that A' — A' is a subset of A — A and thus cannot have 3> A' -0 ^^'! 
zero-divisors) we conclude that there exists a finite subring S of R of 
cardinality \S\ <C A W|A| and a E A' such that a ■ S = S ■ a and 
A' C a ■ S. The claim then follows from the covering lemma as in the 
proof of Theorem 15.21 □ 

5.5. Cyclic rings of low prime power order. Another interesting 
case are the cyclic Z/p k Z of prime power order. We are not able to 
obtain satisfactory results in the important case when k is large (in 
particular, we do not recover the results in [10], [H]), but we can 
obtain the following result which is efficient in the regime k = 0(1). 

Theorem 5.6 (Sum-product phenomenon in cyclic rings). Let p be a 

prime, let R := Z/p k Z for some k > 1, and let A C R be a non-empty 
finite set such that \ A + A\, \ A ■ A\ < K\A\ for some K > 1. Then one 
of the following holds: 

(i) We have Acp-R + 0(K°^); 

(ii) We have \A\ > K~°^\R\. 

Proof. By using the covering lemma (Lemma 12.21) . we see that if the 
set A t := (A — A) Dp ■ R has cardinality > A'~° (1) | A|, then A C 
p- R + O^K ^). Thus we may assume that \Ai\ < cK~ c \A\ for some 
suitable c, C > 0. In particular this implies that at most half the 
elements of A lie in p ■ R, so by removing those elements and increasing 
K slightly we may assume that all elements of A are invertible. We then 
apply Lemma [1.71 to find a subset A' of A of cardinality ^> 
such that \A'-A'-A'-A'\ < K°^\A'\; by theorem O, we can thus find 
ae A' and a subring S of R such that \S\ < K°^\A\ and A' C a ■ S. 
But the only subring of the cyclic ring R that contains an invertible 
element is the full ring R, and so we are in case (ii) as desired. □ 

5.7. Algebras. Now we consider the case of a finite-dimensional alge- 
bra R over a field F (which may be finite or infinite), such as a matrix 
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algebra M^F). As before, our results are only useful in the regime 
when the dimension d is relatively low and F is large. More precisely, 
our result is as follows. 

Theorem 5.8 (Sum-product phenomenon in algebras). Let R be a d- 

dimensional algebra over some field F , and let A C R be a non-empty 
set with \A + A\, \ A ■ A\ < K\A\ for some K > 1. Suppose that the 
characteristic of F is either zero, or is sufficiently large depending on 
d. Then one of the following holds: 

(i) There exists a linear subspace V C R such that every element of 
V is a zero divisor, and such that \AC\ (x + V)\ ^>d K~° d ^\A\ 
for some x G R. (The subscripting by d means that the implied 
constants are allowed to depend on d.) 

(ii) There exists subset A' of A of cardinality K~°^\A\, a fi- 
nite ring Ro, an automorphism : Rq — > Rq, and embeddings 
L n : ((A') n ) —> Rq ■ t n C -Ro for n > which are additive 
homomorphisms, and such that t n+m (a n a m ) = L n (a n )L m (a rn ) for 
all n, m > and a n G ({A') n ), a m G {{A') m ) . 

The author conjectures that the hypothesis on the characteristic can 
be omitted, but does not know how to prove this. 



Before we show Theorem 15.81 we first need a result combining algebraic 
geometry with additive combinatorics, which may be of some indepen- 
dent interest. 

Lemma 5.9 (Linearisation). Let V be a d-dimensional vector space 
over a field F, let W be an algebraic set {x G V : P\(x) = ... = 
Pk(x) = 0} cut out by k polynomials Pi, . . . , Pk : V — » F of degree at 
most D, and let A C W be a non-empty set such that \ A + A\ < K\A\. 
Suppose that the characteristic of F is either zero, or is sufficiently large 
depending on d,k,D. Then there exists an affine space U contained in 
W such that \ A n U\ >d, fe ,D K~°^ D ^ \A\ . 

Proof. Without loss of generality we may take F to be algebraically 
closed, since the general case follows by replacing F with its algebraic 
closure F, and V with the tensor product V ®f F (and noting that the 
restriction of an affine space over F in V ®p F to V is an affine space 
over F). 

Since any algebraic set cut out by k polynomials of degree at most 
D can be expressed as the union of O^z^l) algebraic varieties (i.e. 
irreducible algebraic sets) cut out by Od,k,DiX) polynomials of degree 

This is Corollary 6.11 of Kleiman's article [55] in SGA6 
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at most Od,k,o(l), it suffices (by the pigeonhole principle) to verify the 
claim for algebraic varieties. 

We induct on the dimension d; since the claim is trivial for d — 0, 
we assume d > 1 and that the claim has been proven for smaller d. 
Once d is fixed, we perform a secondary induction on the dimension 
dim(W) of the algebraic variety. The claim is trivial if dim(W) = 
(since \W\ = Od,k,n(X) in this case), so assume dim(W^) > 1 and that 
the claim has already been proven for smaller dimensional varieties in 
the same vector space V . 

Suppose that there is a non-zero element v of V such that W + v = W. 
Let I(W) be the ideal of polynomials that vanish on W, then this ideal 
is invariant under translation by v. In particular, if P is a polynomial 
in I(W), then the derivative P(- + v) —P(-) also lies in I(W). Iterating 
this (starting with one of the generators of W) we conclude that I(W) 
contains at least one non-trivial polynomial P of degree Od,k,D0-) that 
is invariant under v; from the assumption on the characteristic of F, we 
conclude that P factors through the projection map it : V — > V/F ■ v . 
As a consequence, we see that the projection n(W) is a non-trivial 
algebraic set in the vector space V/F ■ v , which is cut out by Od,k,D(X) 
polynomials of degree at most Od,k,n(X)- 

Let M be the maximum value of | APitt - 1 ({a:}) | as x ranges over V/F-v. 
Observe that |A + A| > \n(A)\M; since \A + A\ < K\A\, we conclude 
that Exg^(A) \ A n 7r_1 ({ a:: })l < M\n(A)\/K. We conclude that there 
exists a subset A C ir(A) of cardinality \A\ > \n(A)\/2K such that 
| A n 7T — 1 ({rc}) | > M/2K for all x G A. If we now decompose n(W) into 
algebraic varieties and use the pigeonhole principle as before, and apply 
the outer induction hypothesis, we conclude that there exists an affinc 
space U contained in ir(W) such that |AnC/| ^> d ,k,D K~° d - k ' D ^\A\. If 
we let U := ix^iU) we see from construction that U is an affine space 
contained in W and 

\Anu\ > \Anu\M/2K 

>^,d K-°^°W\A\M 
»^,d K-°^^\n(A)\M 
>^,d K-°^^\A\ 

thus closing the induction in this case. Thus we may assume without 
loss of generality that W + v ^ W for all non-zero v; since W is 
irreducible, this implies that W + v fl W is an algebraic set consisting 
of varieties of strictly smaller dimension than W. 



22 



TERENCE TAO 



Using the identities 

\{a + A ) n (a' + A)\ = \{(a,b)eA:a + b = x}\ 2 

a,a'£A xGA+A 

and 

\{(a,b) E A : a + b = x}\ = \A\ 2 

xeA+A 

and Cauchy-Schwarz, we have 

\{a + A)n{a' + A)\ > \A\ 4 /\A + A\ > \A\ 3 /K. 

a,a'eA 

The contribution of the diagonal term a = a' is negligible unless \A\ — 
O(K), in which case the claim is trivial. In all other cases, we can 
apply the pigeonhole principle and conclude that there exist distinct 
a, a' G A such that 

\(a + A)n(a' + A)\y>> \A\/K. 

If we set v := a' — a and A' := A n (A + v), we thus conclude that 
\A'\ > \A\/K and 

\A' + A'\ <\A + A\< K\A\ < K 2 \A'\. 

Also, A' is contained in Wfl (W + v) and is thus contained in Od,k,DiX) 
varieties of dimension strictly less than W, and cut out by Od,fc,D(l) 
polynomials of degree O^r^l). Applying the inner induction hypoth- 
esis we may thus find an affine subspace U in W H (W + u) (and hence 
in W) such that \A' n f/| > d , fcjD > difejD 
thus closing the induction in this case also. □ 

Now we can prove Theorem 15.81 

Proof of Theorem \5.8\ . We can assume that \A\ > CK C for some large 
C, since the claim is trivial otherwise. By writing the product operation 
on R in coordinates over F, we observe that the set of non- zero-divisors 
in R is an algebraic set cut out by 0^(1) polynomials of degree at most 
0^(1). If more than half the elements of A lie in this set, then we can 
apply Lemma 15.91 to those elements and establish conclusion (i) of the 
theorem; thus we may assume that fewer than half of the elements of A 
are zero- divisors. By throwing away all the zero-divisors we may thus 
assume that A lies entirely in R*. Applying Lemma [1.71 and we may 
now assume that either A — A contains ^> i^ -0 ^ 1 ^^! zero- divisors, 
or that \A' ■ A' - A' ■ A'\ < K°^ l) \A\ for some subset A' C A of 
cardinality ^> In the former case, if we apply Lemma [5~79l to 

(A — A)\R* we can locate a vector space V of zero divisors such that 
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the set A' := (A - A) n V has cardinality > d K~° d ^\A\ elements of 
A — A. By sum set estimates (Lemma 12.31) we have 

\A' + A\ < \A - A + A\ < £T° (1) |A| 

and so by the covering lemma (Lemma 12.21) we conclude that 

A C A' - A' + O d (K° d{1) ) C V + O d (if° d(1) ) 

and so we are again in conclusion (i) of the theorem. Thus we may 
assume that \A'-A'—A'-A'\ < fT 0(1) |v4'| for some A' C A of cardinality 
^> f^ _0( - 1 - l |y4|. We then apply Theorem 11.61 and conclude that either 
A' -A' contains > K' oi ^\A\ zero divisors, or else we are in conclusion 
(ii) of the theorem. In the former case we can argue as before to end 
up in conclusion (i) of the theorem, and the claim follows. □ 

It should be possible to analyse the conclusions (i) and (ii) of Theorem 
15.81 further for specific algebras. For instance, when F is finite and 
R contains an identity, then every non-zero-divisor is invertible, and 
one can use Theorem 11.51 instead of Theorem 11.61 to simplify conclusion 
(ii). If instead we have R = M 2 (F), then the only affine spaces of zero 
divisors are either one or zero-dimensional, or are two dimensional and 
consist of the matrices which either left-annihilate or right-annihilate 
a nonzero vector v G F 2 ; this leads to a more explicit description 
of conclusion (i), although the final form is somewhat complicated to 
express and will not be done here. 
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